Abstract: Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. More specifically, embodiments relate to providing financial cost estimate for electronic discovery requests that allow the requester to gauge financial costs at the onset of the request. In addition to providing for a cost estimate at or near the time that the request is made, further embodiments of the invention, provide for a dynamic estimate of financial cost. The dynamic financial cost estimate changes over time based on the e-discovery tasks already performed and a better assessment of the degree of further e-discovery tasks yet to be performed. As such, the dynamic financial estimate becomes a more accurate and reliable estimate the closer the e-discovery request is to completion.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. More specifically, embodiments relate to providing positive identification of individuals for addition, as custodians, to cases or matters within an electronic discovery system. The identification is performed simultaneously, in bulk, using disparate information related to the individuals. In this regard, individuals can be positively identified through one specific identification procedure, without having to search multiple databases to verify the identity of an individual/custodian. In addition to positively identifying custodians, the present invention provides for adding the identified custodians, simultaneously, in bulk, to a case or matter and, in some embodiments, uploading or otherwise transferring custodian profile data to the case management system/database, as need be.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. More specifically, embodiments relate to managing the process for creating search term sets to be applied to electronic data sets associated with a case in an electronic discovery system. A search term management application is provided that allows for multiple users to work collaboratively to define the final search term set that is subsequently applied to the corpus of electronic data for the case. In addition, the application provides for tracking the overall search term creation process. In addition, embodiments provide for a search term hit count engine that is configured to determine search term hit counts for data as a means of predicting the volume of data needed to review.

Abstract: Embodiments herein disclosed relate to methods, systems and computer program products that provide an enterprise wide e-discovery system configured to search myriad data sources across an enterprise to identify electronic data relevant to a particular data request, harvest the relevant electronic data, filter the electronic data to identify request file types, transfer the request file types to a data store, and assign labels, such as barcodes, to the requested file types for the purpose of producing, in an organized fashion, all requested electronic data that is in the enterprise's possession.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. More specifically, embodiments relate to computer program products for targeted document review assignments by determining concept-related data groupings within the overall corpus of data associated with a case and assembling the targeted document review assignments based on the concept-related data groupings. As such, document reviewers are presented with assignments that have highly conceptually-related documents, which results in further efficiency in the review process.

Abstract: Apparatus, methods and computer program products are described herein for automatically decrypting electronic communication that is harvested from custodians in an enterprise-wide electronic discovery system. Automatic decryption provides for electronic communication that is encrypted to be decrypted, even in instances in which the system is not provided the password and/or decryption key(s) from the encrypting custodian. The automatic decryption process, which ensues prior to delivering data to the third party data analysis provider or the requesting party, allows for data that may otherwise be unavailable or incomprehensible to the third party or requester to be readily accessible. Thus, decryption of such data in a relatively efficient and automated manner is highly beneficial.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. More specifically, embodiments relate to computer program products for predictive and automated coding of identical or highly similar documents for the purpose of limiting the volume of documents requiring review and thereby increasing the overall efficiency of the document review process.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products determining suggestive potential custodians in an electronic discovery system. The determination is based on a comparison of data, such as personnel data or like, associated with individuals already added to the case and all other individuals in the enterprise, who form the group of potential custodians. In addition, the comparison of data occurs over the specified timeframe defined by the case to insure that the suggested potential custodians are within the confines to the timeframe of the case. Additional embodiments of the invention provide for determining preservation notice recipients based on a comparison of data, such as personnel data or the like, associated with individuals that have already been identified to receive the preservation notice and other custodians and/or potential custodians.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. Embodiments herein disclosed provide for an enterprise wide electronic management server that provides for data to be identified, located, retrieved, preserved, searched, reviewed and produced in an efficient and cost-effective manner across the entire enterprise system. In addition, by structuring management of e-discovery based on case/matter, custodian and data and providing for linkage between the same, further efficiencies are realized in terms of identifying, locating and retrieving data and leveraging results of previous e-discoveries with current requests.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. More specifically, embodiments relate to initiating collection of data from electronic discovery custodians and/or devices associated with the custodian based on status update notification. The status update may include, but are not limited to, changes/updates in employment status of a custodian and/or changes/updated in the use status of a device associated with the custodian. As such, present embodiments of the method monitor status update on timely predetermined schedule, such as once every business day or the like, to insure that status updates/changes are recognized within the electronic discovery system as they occur or immediately thereafter. Once status changes are recognized that affect a custodian, embodiments of the present invention, provide for automated initiation of data collection.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for the management of custodians within an electronic discovery system. Embodiments of the invention herein disclosed provide for methods of creating, maintaining, and utilizing a unified custodian directory for the purposes of carrying out electronic discovery within an enterprise environment. By employing a unified custodian directory to manage custodians apart from the electronic discovery cases to which they relate, the custodian management system of the present invention promotes efficiencies in the field of electronic discovery.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for identifying users of personal computers within a network for the purposes of electronic discovery. Embodiments herein disclosed provide for a tool that accesses the personal computers via the network, locates and queries the profile list on each personal computer, transmits for each personal computer computer-identifying data associated with the personal computer and user-identifying data associated with a user of the personal computer, and stores the computer-identifying data in a database so that it can be used in an electronic discovery system to collect data stored by the user on the computer.

Abstract: Embodiments of the invention relate to systems, methods, and computer program products for a local collection tool that is configured to run as an authorized background service process. As such, the local collection tool of the present invention is capable of being executed in the absence of the device user's credentials. As a result, local collection can be accomplished without the user being present or covertly without the user's knowledge of collection process. Moreover, the back-up file generated by the collection tool may include encrypted data, which can automatically be decrypted by the collection entity through application of a master key.

Abstract: Methods and systems for processing fraud notifications allow an organization to classify, monitor, and shut down fraudulent websites. A system may receive reports of suspicious network sites via electronic mail, and parse such reports in order to obtain one or more attributes (e.g., an address) corresponding to the suspicious network sites. In addition, information related to these suspicious network sites may be stored in a database, and algorithms may be used in order to classify, monitor, and respond to a particular suspicious network site. Before responding to a suspicious network site, such a website may first be classified as legitimate, fraudulent or ignore. If the suspicious network site is classified as legitimate or ignore, further action might not be needed. If, however, the suspicious network site is classified as fraudulent, the fraudulent website may be monitored and further action may be taken.